Help MTA by finding security flaws and working cheats so we can fix them.
Vulnerabilities from resources:
* €100 - Run arbitrary x86 code in MTA
* €50 - Ability to run a compiled script that has not been compiled at https://luac.multitheftauto.com/ (or otherwise authorized by MTA)
* €50 - Read directories outside of MTA install directory
* €Ask - Other vulnerability you may have found
Client cheats:
* €30 - Working cheat engine variant
* €30 - Other working cheats
* €15 - Exploiting (previously unknown) bugs or glitches
* €5 - Using a program to gain unfair advantage
MTA web sites:
* €50 - Serious security breach
* €30 - Small security breach
* €15 - XSS with exploit potential
* €5 - XSS without exploit potential
* €Ask - Other vulnerability you may have found
Terms:
1) Game vulnerability/cheat must work on latest 1.5 nightly, with all AC detections enabled.
2) Submit your vulnerability/cheat by creating a topic in the Private Bugs board.
3) Only the first person to submit any particular vulnerability/cheat will get the bounty.
4) We reserve the right to change terms in case of abuse or other similar reasons.
5) We only accept PayPal for bounty payments.
P.S.
The undetectable MTA cheats from BoxyHaxSamp (multihack nbvf, Aim bot, Change Serial) are all scams, so please don't bother reporting them.
If you are wondering why MTA pays security researchers/ethical hackers:
Note: the MTA AC team uses "method" in 1 breath with "vulnerability" and "technique"
MTA has a security-oriented anti cheat that doesn't work by signatures of individual cheats, but patches the underlying method (then considered a vulnerability) used to get cheating functionality. It's complicated to explain and would be an essay, but we summarized it in the below spoiler. Open it to read, especially if you plan to try and hack MTA for the bug bounty program